0a0148bd78
Infrastructure and secrets complete, needs configuration initialization. Created: - Complete Kubernetes manifests (deployment, service, ingress, PVC) - SealedSecrets for OIDC, SMTP, JWT, and core configuration - Base opencloud.yaml ConfigMap with bash substitution - Pocket ID integration (client + opencloud_admins group) - DNS configured (opencloud.basicstack.de) Status: Blocked on OpenCloud initialization - OpenCloud requires comprehensive config from 'opencloud init' - Manual environment variable configuration insufficient - Multiple interdependent service configurations needed - See IMPLEMENTATION_STATUS.md for details and next steps Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
53 lines
1.3 KiB
YAML
53 lines
1.3 KiB
YAML
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: opencloud-config
|
|
namespace: opencloud
|
|
data:
|
|
opencloud.yaml: |
|
|
# OpenCloud Base Configuration
|
|
# Uses bash substitution to inject secrets from environment variables
|
|
|
|
# Core secrets (injected via environment variables)
|
|
token_manager:
|
|
jwt_secret: ${OC_TOKEN_MANAGER_JWT_SECRET}
|
|
|
|
machine_auth_api_key: ${OC_MACHINE_AUTH_API_KEY}
|
|
system_user_api_key: ${OC_SYSTEM_USER_API_KEY}
|
|
transfer_secret: ${OC_TRANSFER_SECRET}
|
|
url_signing_secret: ${OC_URL_SIGNING_SECRET}
|
|
|
|
system_user_id: ${OC_SYSTEM_USER_ID}
|
|
admin_user_id: ${OC_ADMIN_USER_ID}
|
|
|
|
# OIDC configuration
|
|
proxy:
|
|
oidc:
|
|
issuer: https://auth.basicstack.de
|
|
insecure: false
|
|
user_oidc_claim: preferred_username
|
|
user_cs3_claim: username
|
|
|
|
# Disable demo users
|
|
idm:
|
|
create_demo_users: false
|
|
|
|
# Graph service configuration
|
|
graph:
|
|
assign_default_user_role: false
|
|
username_match: none
|
|
application:
|
|
id: ${OC_GRAPH_APPLICATION_ID:-a72387e1-fb22-49c9-9c94-12ff0abf9b38}
|
|
events:
|
|
tls_insecure: true
|
|
spaces:
|
|
insecure: true
|
|
|
|
# Gateway configuration
|
|
gateway:
|
|
storage_users_mount_id: ${STORAGE_USERS_MOUNT_ID:-/users}
|
|
|
|
# Storage configuration
|
|
storage_users:
|
|
mount_id: ${STORAGE_USERS_MOUNT_ID:-/users}
|